Russian state hackers use new TinyTurla malware as secondary backdoor

TinyTurla is a backdoor from the Turla APT group that has been used since at least 2020, Cisco Talos researchers say. The Russian state-sponsored hackers have been using the new malware as a secondary persistence method on compromised systems in the U.S., Germany, and Afghanistan. The group may go as far back as 1996, though, a massive cyberespionage operation on classified systems from NASA, the Pentagon, military contractors, and multiple government agencies in the United States.”]

Source: https://www.bleepingcomputer.com/news/security/russian-state-hackers-use-new-tinyturla-malware-as-secondary-backdoor/